Bump starlette from 0.44.0 to 0.46.2

[dependabot[bot]]

Bumps starlette from 0.44.0 to 0.46.2.

Release notes

Sourced from starlette's releases.

Version 0.46.2

What's Changed

• Use correct index on backwards compatible logic in TemplateResponse by @​alex-oleshkevich in encode/starlette#2909
• Prevents reraising of exception from BaseHTTPMiddleware by @​ramannanda9 in encode/starlette#2911

New Contributors

• @​ahryniv made their first contribution in encode/starlette#2913
• @​ramannanda9 made their first contribution in encode/starlette#2911

Full Changelog: https://github.com/encode/starlette/compare/0.46.1...0.46.2

Version 0.46.1

Fixed

• Allow relative directory path when follow_symlinks=True #2896.

---

Full Changelog: https://github.com/encode/starlette/compare/0.46.0...0.46.1

Version 0.46.0

Added

• GZipMiddleware: Make sure Vary header is always added if a response can be compressed #2865.

Fixed

• Raise exception from background task on BaseHTTPMiddleware #2812.
• GZipMiddleware: Don't compress on server sent events #2871.

Changed

• MultiPartParser: Rename max_file_size to spool_max_size #2780.

Deprecated

• Add deprecated warning to TestClient(timeout=...) #2840.

New Contributors

• @​musicinmybrain made their first contribution in encode/starlette#2855
• @​WilliamDEdwards made their first contribution in encode/starlette#2870
• @​mattmess1221 made their first contribution in encode/starlette#2865

Full Changelog: https://github.com/encode/starlette/compare/0.45.3...0.46.0

Version 0.45.3

Fixed

• Turn directory into string on lookup_path on commonpath comparison by @​Kludex in encode/starlette#2851

... (truncated)

Changelog

Sourced from starlette's changelog.

0.46.2 (April 13, 2025)

Fixed

• Prevents reraising of exception from BaseHttpMiddleware #2911.
• Use correct index on backwards compatible logic in TemplateResponse #2909.

0.46.1 (March 8, 2025)

Fixed

• Allow relative directory path when follow_symlinks=True #2896.

0.46.0 (February 22, 2025)

Added

• GZipMiddleware: Make sure Vary header is always added if a response can be compressed #2865.

Fixed

• Raise exception from background task on BaseHTTPMiddleware #2812.
• GZipMiddleware: Don't compress on server sent events #2871.

Changed

• MultiPartParser: Rename max_file_size to spool_max_size #2780.

Deprecated

• Add deprecated warning to TestClient(timeout=...) #2840.

0.45.3 (January 24, 2025)

Fixed

• Turn directory into string on lookup_path on commonpath comparison #2851.

0.45.2 (January 4, 2025)

Fixed

• Make create_memory_object_stream compatible with old anyio versions once again, and bump anyio minimum version to 3.6.2 #2833.

0.45.1 (December 30, 2024)

Fixed

• Close MemoryObjectReceiveStream left unclosed upon exception in BaseHTTPMiddleware children #2813.
• Collect errors more reliably from the WebSocket logic on the TestClient #2814.

... (truncated)

Commits

• 4a81176 Version 0.46.2 (#2921)
• 48f7cd7 Prevents reraising of exception from BaseHttpMiddleware (#2911)
• 5d98cd5 Include Python 3.14 to the pipeline (#2919)
• eb6cebb Bump the python-packages group with 6 updates (#2914)
• d278caf Fix link title for contextvars.ContextVar (#2913)
• bcdf0ad fix IndexError in TemplateResponse (#2909)
• c8a4692 Update note about anyio thread pool (#2895)
• aa8f6f0 docs: fix email on sponsorship page
• a8a4437 docs: fix Alex's github handle (#2901)
• df754ca Version 0.46.1 (#2900)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)